Since the Russian invasion on February 24th, 2022, Ukrainians have had to defend their data against an unprecedented number of data-wiping malware variants. While Russian threat actors seem like the obvious culprits, attributing these attacks to specific groups based on evidence is a different beast. In this podcast episode, ESET researchers Anton Cherepanov and Robert Lipovský explain to the host Aryeh Goretsky what pointed them to the crucial samples, how they pinned some of the attacks on the Russian cybergroup probably most notorious for NotPetya and Industroyer. The guests of this episode also offer their recollection of the events of February 23rd, 2022; compare HermeticWiper to its successors; and reveal the range of operating systems that were targeted as well as the level of success achieved by the attacks.

Host:

Aryeh Goretsky, ESET Distinguished Researcher

Guests:

Anton Cherepanov, ESET Senior Researcher

Robert Lipovský, ESET Principal Researcher

Blogposts:

A year of wiper attacks in Ukraine

Episode from March 2022: Past and present cyberwar in Ukraine